CVE-2016-9074
Published: 16 November 2016
An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.
Priority
Medium
CVSS 3 base score: 5.9
Status
| Package | Release | Status |
|---|---|---|
|
nss Launchpad, Ubuntu, Debian |
Upstream |
Released
(3.26.1)
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(2:3.26.2-0ubuntu0.16.04.2)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Released
(2:3.26.2-0ubuntu0.14.04.3)
|
|
|
Patches: Upstream: https://hg.mozilla.org/projects/nss/rev/d38536fcc726 Upstream: https://hg.mozilla.org/projects/nss/rev/6883f1fc9129 Upstream: https://hg.mozilla.org/projects/nss/rev/6ca604746182 |
||